Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File: KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier: anBDklXxGC3NMjez+D16kuESHBDwEqOeU9n5raRU1HQ=
Subject key identifier: 96:B6:38:49:BF:35:0E:43:69:6C:D9:04:5F:5D:C4:E5:25:3C:C5:77
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer: /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial: 01974967B35CA7AF8688A13957D5B327BD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number: 0C5D
Signing time: Sat 07 Jun 2025 08:00:22 +0000
Manifest this update: Sat 07 Jun 2025 08:00:22 +0000
Manifest next update: Sun 08 Jun 2025 08:00:22 +0000
Files and hashes: 1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: pB0V28glBrKbT5FA4ty1VmE5CA0vG3JVh4FyW5uyNNI=)
2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b3:5c:a7:af:86:88:a1:39:57:d5:b3:27:bd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Validity
Not Before: Jun 7 08:00:22 2025 GMT
Not After : Jun 8 08:00:22 2025 GMT
Subject: CN=96b63849bf350e43696cd9045f5dc4e5253cc577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:52:83:72:b6:5e:cc:1b:8e:1c:f2:21:d8:
7f:cc:12:cc:1f:f3:53:60:ed:cb:ff:ec:96:da:53:
80:9e:44:8c:09:37:e9:3e:de:d1:28:ad:2d:2c:85:
b2:ab:63:7b:ac:35:6d:19:54:ca:c8:82:ad:05:e4:
a3:5d:28:a5:95:95:c4:51:21:60:ed:a5:54:85:db:
7d:46:40:2f:a3:13:93:fd:fa:8f:ea:d9:db:9e:7a:
d0:9d:8a:0f:50:ed:fe:52:8b:7e:7b:80:ed:44:ff:
a9:46:19:b5:7e:63:92:00:ce:29:29:60:63:7c:28:
58:6e:d1:3f:c1:62:7f:09:e9:a8:84:88:e5:cd:f4:
ea:e0:fe:a0:ef:13:1d:eb:b0:7e:d7:69:a3:1d:4e:
86:8c:c4:5f:25:3f:16:27:13:6f:5f:bc:ef:a1:2a:
e2:54:e9:cb:de:48:31:97:7b:fb:fd:35:33:53:5e:
67:e6:05:f1:75:44:ec:ae:e9:fb:01:ca:66:a5:05:
38:c4:0b:6c:29:64:59:56:c8:93:b6:b1:69:90:7a:
6d:d4:b0:93:f8:ee:59:bb:0b:54:b2:d2:14:c6:86:
c5:a8:33:22:97:1d:dd:3d:3e:83:63:77:b5:9f:a5:
59:dd:a4:df:08:6b:0d:6d:8d:6a:c2:3c:58:6e:28:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B6:38:49:BF:35:0E:43:69:6C:D9:04:5F:5D:C4:E5:25:3C:C5:77
X509v3 Authority Key Identifier:
keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:05:8a:98:71:0e:32:da:45:35:d3:ac:a3:13:58:08:bc:d2:
12:61:79:c0:32:5f:b5:58:25:dc:11:be:58:cb:fb:77:01:0c:
37:3e:54:33:9d:fe:02:48:88:f6:d3:4f:29:d5:21:3e:e7:67:
7d:0d:0f:0f:ce:6b:94:f2:41:32:29:fd:c0:61:2d:bf:e9:7a:
9b:2e:4e:86:41:0e:ea:75:26:a5:d8:aa:ce:17:77:85:54:7b:
46:a0:66:83:62:54:42:84:2b:62:45:f1:94:6c:55:26:b6:06:
a7:f6:2b:8b:3c:9a:10:a4:9b:39:b4:46:87:ab:35:2c:16:63:
46:29:e2:a7:21:5d:3f:a9:b2:86:b4:de:b8:c6:ec:da:62:10:
a2:f2:d6:1d:4e:16:5f:a2:08:b3:3a:f5:7a:96:d7:1a:2e:83:
ae:db:a7:1c:6d:28:ad:70:43:80:e5:cf:c1:ad:e9:61:a9:35:
3e:76:4c:32:f7:09:45:e5:3c:77:76:89:5a:89:0f:0b:e1:76:
40:d9:6d:c0:83:89:94:aa:5c:6b:a2:12:da:76:c0:cc:4d:42:
bf:59:fc:2f:6f:6e:2d:ee:4b:07:06:db:58:84:76:d3:84:73:
ef:4d:ca:51:4e:04:dd:7f:48:87:43:39:e6:ef:d1:4f:e5:1d:
d3:18:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:53 2025 by rpki-client